1 files changed, 101 insertions, 0 deletions
diff --git a/tests/sys/geom/class/eli/kill_test.sh b/tests/sys/geom/class/eli/kill_test.sh
new file mode 100644
index 000000000000..eeaa440f11a9
--- /dev/null
+++ b/tests/sys/geom/class/eli/kill_test.sh
@@ -0,0 +1,101 @@
+
+. $(atf_get_srcdir)/conf.sh
+
+atf_test_case kill cleanup
+kill_head()
+{
+	atf_set "descr" "geli kill will wipe a provider's metadata"
+	atf_set "require.user" "root"
+}
+kill_body()
+{
+	geli_test_setup
+
+	sectors=100
+	attach_md md -t malloc -s `expr $sectors + 1`
+
+	atf_check dd if=/dev/random of=keyfile1 bs=512 count=16 status=none
+	atf_check dd if=/dev/random of=keyfile2 bs=512 count=16 status=none
+
+	atf_check geli init -B none -P -K keyfile1 ${md}
+	atf_check geli attach -p -k keyfile1 ${md}
+	atf_check -s exit:0 -o ignore geli setkey -n 1 -P -K keyfile2 ${md}
+
+	# Kill attached provider.
+	atf_check geli kill ${md}
+	sleep 1
+	# Provider should be automatically detached.
+	if [ -c /dev/${md}.eli ]; then
+		atf_fail "Provider did not detach when killed"
+	fi
+
+	# We cannot use keyfile1 anymore.
+	atf_check -s not-exit:0 -e match:"Cannot read metadata" \
+		geli attach -p -k keyfile1 ${md}
+
+	# We cannot use keyfile2 anymore.
+	atf_check -s not-exit:0 -e match:"Cannot read metadata" \
+		geli attach -p -k keyfile2 ${md}
+
+	atf_check geli init -B none -P -K keyfile1 ${md}
+	atf_check -s exit:0 -o ignore \
+		geli setkey -n 1 -p -k keyfile1 -P -K keyfile2 ${md}
+
+	# Should be possible to attach with keyfile1.
+	atf_check geli attach -p -k keyfile1 ${md}
+	atf_check geli detach ${md}
+
+	# Should be possible to attach with keyfile2.
+	atf_check geli attach -p -k keyfile2 ${md}
+	atf_check geli detach ${md}
+
+	# Kill detached provider.
+	atf_check geli kill ${md}
+
+	# We cannot use keyfile1 anymore.
+	atf_check -s not-exit:0 -e match:"Cannot read metadata" \
+		geli attach -p -k keyfile1 ${md}
+
+	# We cannot use keyfile2 anymore.
+	atf_check -s not-exit:0 -e match:"Cannot read metadata" \
+		geli attach -p -k keyfile2 ${md}
+}
+kill_cleanup()
+{
+	geli_test_cleanup
+}
+
+atf_test_case kill_readonly cleanup
+kill_readonly_head()
+{
+	atf_set "descr" "geli kill will not destroy the keys of a readonly provider"
+	atf_set "require.user" "root"
+}
+kill_readonly_body()
+{
+	geli_test_setup
+
+	sectors=100
+	attach_md md -t malloc -s `expr $sectors + 1`
+	atf_check dd if=/dev/random of=keyfile bs=512 count=16 status=none
+
+	atf_check geli init -B none -P -K keyfile ${md}
+	# Attach read-only
+	atf_check geli attach -r -p -k keyfile ${md}
+
+	atf_check geli kill ${md}
+	# The provider will be detached
+	atf_check [ ! -c /dev/${md}.eli ]
+	# But its keys should not be destroyed
+	atf_check geli attach -p -k keyfile ${md}
+}
+kill_readonly_cleanup()
+{
+	geli_test_cleanup
+}
+
+atf_init_test_cases()
+{
+	atf_add_test_case kill
+	atf_add_test_case kill_readonly
+}